Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Exchange 欺骗漏洞
Vulnerability Description
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。Outlook Web Access（OWA）是其中的一个可选组件，为用户提供访问Exchange mailbox的Web接口，允许用户通过Web浏览器整合电子邮件、语音邮件等。 Microsoft Exchange Server中的OWA中存在欺骗漏洞，该漏洞源于程序未能正确处理Web请求。远程攻击者可利用该漏洞进行脚本或内容注入攻击，并试图欺骗用户泄漏敏感信息，也可能会将用户重定向到可能欺骗内
CVSS Information
N/A
Vulnerability Type
N/A